Job description

Some careers grow faster than others.

If you’re looking for a career that will give you plenty of opportunities to develop, join HSBC and your future will be rich with potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.

IT Operations manages the IT infrastructure and supporting services that are critical for HSBC employees and customers, such as cost-efficient hardware, system software, middleware and databases, data centres, voice and data networks, ATMs, desktops and other devices.

The area comprises five functions: Client Services, Enterprise Services and Architecture, Data Centre and Service Management, Relationship Management, Project Management and Risk and Administration. Collectively, these areas define and deliver HSBC’s technology strategy to support the Group’s goals. 

We are currently seeking a high calibre professional to join our team as a Head of Cyber Security Singapore. 

Principal Responsibilities

In this role you will

  • Lead and management of the cybersecurity function for Singapore, overseeing all aspects of cyber risk management, threat detection, and incident response and execute the global Cybersecurity strategy and key priorities within Singapore
  • Manage stakeholders including the Market/Entity Board(s), CIO, COO and CEO, as well as Cybersecurity Leadership and staff, and external bodies, where applicable.  These include key regulators which apply to Singapore and its associated jurisdiction(s) and assist with business stakeholders across the market to raise awareness of cybersecurity risk concerns and educate market management about market cybersecurity risk level and actions required to mitigate/control existing risks
  • Ensure appropriate oversight mechanisms and high standards of internal cybersecurity controls for Singapore market, ensuring the identification of emerging threats in the Cybersecurity landscape are in place
  • Assist with definition of the global Cybersecurity strategy based on business requirements and ensures its execution through Singapore and Globally led programme that provide adequate, embedded, and effective protection of firm’s information and technology assets
  • Provide Singapore ownership and implement Cybersecurity best practice, standards and governance frameworks, mapping and adjusting controls to the evolving Cyber threat landscape. The position enhances operational controls, ensuring appropriate tools, Cybersecurity frameworks are adopted, assigned to and owned by stakeholders across HSBC Singapore
  • Represent Singapore Cybersecurity in relevant management and governance forums, e.g. Risk Management Meeting, Risk & Control Management Meeting, Info Security Risk Working and Steering Group, Audit and Risk Committee etc.
  • Ensure adherence to cybersecurity controls and enable/ facilitate access to existing cybersecurity services to support the business strategy or market-specific initiatives which includes ensuring compliance with the relevant Notices and Guidelines in Singapore applicable and understand the market's critical assets, identify threats/ vulnerabilities and determine corresponding cybersecurity risk levels based on globally established control requirements and augmented by local or jurisdictional requirements
  • Work with stakeholders in respective Global/Region/market to support the cybersecurity event/incidents response and collaborating with the Global, Regional and market representatives of Technology, plus other peer managers to implement the team's goals within entity policy, expense and regulatory constraints
Requirements

To be successful you will need

  • To possess significant technical experiences such as industry leading subject matter expertise in Cybersecurity together with a broad technology and risk management experience. This includes but is not limited to cybersecurity control design and implementation, operational process and incident response
  • Strong stakeholder management skills are required. Extensive leadership experience within fast-moving, complex and demanding corporate environments where Cybersecurity issues have to be handled on a large scale and experience in managing board level stakeholders and of direct regulatory engagement
  • Leadership: Experience of having led international projects/initiatives with a team of Cybersecurity professionals, raising standards within the function and improving the profile of Cybersecurity across a large, complex, international organization.  Ability to motivate people and transform the function into a world-class Cybersecurity organization
  • One or more industry-recognized cybersecurity-related certifications are required (as per Regional Regulatory Requirements) including ISO270001, CISA, CISM, CISSP, CRISC.
  • Minimum Degree in Cybersecurity, Information Security, Computer Science, or related discipline and/or experience in IT security governance and operational processes, preferably in the Financial Services industry or global corporate service provider
  • Manages Ambiguity & Ensures Accountability: Operating effectively, even when things are not certain, or the way forward is not clear; holds self and others accountable to meet commitments

Opening up a world of opportunity
http://www.hsbc.com/careers

HSBC is committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and opportunities to grow within an inclusive and diverse environment. Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.

Issued by The Hongkong and Shanghai Banking Corporation Limited.